Feed live

php CVEs

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,356

All time

Critical · Active

12,216

CVSS ≥ 9.0

New · 14 days

3,578

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 8371–8400 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2022-40291	—	—	Cross-site request forgery (CSRF) in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC	Oct 31, 2022 3y ago
CVE-2022-40293	—	—	Session fixation in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC.	Oct 31, 2022 3y ago
CVE-2022-40288	—	—	Stored cross-site scripting in PHP Point of Sale version 19.0, by PHP Point of Sale, LLC via messaging functionality	Oct 31, 2022 3y ago
CVE-2022-3771	medium	6.3/10	easyii CMS File Upload Management Upload.php file unrestricted upload	Oct 31, 2022 3y ago
CVE-2022-3766	high	7.3/10	Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq	Oct 31, 2022 3y ago
CVE-2022-3765	high	8.2/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Oct 31, 2022 3y ago
CVE-2022-3380	—	—	Customizer Export/Import < 0.9.5 - Admin+ PHP Objection Injection	Oct 31, 2022 3y ago
CVE-2022-3374	—	—	Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection	Oct 31, 2022 3y ago
CVE-2022-3366	—	—	PublishPress Capabilities < 2.5.2 - Admin+ PHP Objection Injection	Oct 31, 2022 3y ago
CVE-2022-3360	—	—	LearnPress < 4.1.7.2 - Unauthenticated PHP Object Injection via REST API	Oct 31, 2022 3y ago
CVE-2022-3357	—	—	Smart Slider 3 < 3.5.1.11 - PHP Object Injection	Oct 31, 2022 3y ago
CVE-2022-3334	—	—	Easy WP SMTP < 1.5.0 - Admin+ PHP Objection Injection	Oct 31, 2022 3y ago
CVE-2022-3754	high	7.5/10	Weak Password Requirements in thorsten/phpmyfaq	Oct 29, 2022 3y ago
CVE-2022-3733	medium	5.0/10	SourceCodester Web-Based Student Clearance System edit-admin.php sql injection	Oct 28, 2022 3y ago
CVE-2022-3673	low	3.5/10	SourceCodester Sanitization Management System Master.php cross site scripting	Oct 26, 2022 3y ago
CVE-2022-3672	low	3.5/10	SourceCodester Sanitization Management System SystemSettings.php cross site scripting	Oct 26, 2022 3y ago
CVE-2022-3671	medium	6.3/10	SourceCodester eLearning System manage.php sql injection	Oct 26, 2022 3y ago
CVE-2022-3335	—	—	Kadence WooCommerce Email Designer < 1.5.7 - Admin+ PHP Objection Injection	Oct 25, 2022 3y ago
CVE-2022-3608	high	7.2/10	Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq	Oct 19, 2022 3y ago
CVE-2022-22246	high	7.5/10	Junos OS: PHP file inclusion vulnerability in J-Web	Oct 18, 2022 3y ago
CVE-2022-22223	medium	6.5/10	Junos OS: QFX10000 Series: In IP/MPLS PHP node scenarios upon receipt of certain crafted packets multiple interfaces in LAG configurations may detach.	Oct 18, 2022 3y ago
CVE-2022-3584	medium	6.3/10	SourceCodester Canteen Management System edituser.php sql injection	Oct 18, 2022 3y ago
CVE-2022-3583	high	7.3/10	SourceCodester Canteen Management System login.php sql injection	Oct 18, 2022 3y ago
CVE-2022-3579	medium	6.3/10	SourceCodester Cashier Queuing System Login Page login.php sql injection	Oct 18, 2022 3y ago
CVE-2022-3496	medium	6.3/10	SourceCodester Human Resource Management System Admin Panel employeeadd.php access control	Oct 14, 2022 3y ago
CVE-2022-3473	medium	6.3/10	SourceCodester Human Resource Management System getstatecity.php sql injection	Oct 12, 2022 3y ago
CVE-2022-3472	medium	6.3/10	SourceCodester Human Resource Management System city.php sql injection	Oct 12, 2022 3y ago
CVE-2022-3471	medium	6.3/10	SourceCodester Human Resource Management System city.php sql injection	Oct 12, 2022 3y ago
CVE-2022-3470	medium	6.3/10	SourceCodester Human Resource Management System getstatecity.php sql injection	Oct 12, 2022 3y ago
CVE-2022-3464	medium	4.3/10	puppyCMS settings.php cross site scripting	Oct 12, 2022 3y ago